Before going in to the topic, pls check my other blogs also on the implementation of the NSX Manager 6.1.4 so that you can get more information on the same.

First add the vCenter to the DSM and when it prompt for the vShield or NSX Manager , provide the NSX Manager details.

Preparing ESXi Servers

Before the Deep Security Virtual Appliance service can be deployed to your datacenter, your ESXi servers must first be prepared by installing the drivers necessary for network traffic inspection. This operation is performed on the cluster.Pls check my blog preparing the cluster and host for more info.

VM must be organized into a NSX Security Group before a vSphere policy is assigned to them.

Go to the Security Groups – Home – Networking & Security – Service Composer and click the New Security Group icon.

Give the name to the security Group.

Define Dynamic Membership: If you wish to restrict membership in this group based on certain filtering criteria, enter those criteria here

There are many ways to include or exclude objects in a NSX Security Group, but for this example, we will simply include the NSX cluster that contains the hosts and VMs that we want to protect. In the Select objects to include options, select Cluster from the Object Type menu, and move the NSX Cluster that contains the VMs to protect to the Selected Objects column.

Click Finish to create the new security group.

Install the Deep Security Service.

To provide agentless protection to the virtual machines on your ESXi servers, you must install the Deep Security service (the Deep Security Virtual Appliance) on your ESXi servers

Login to the web-client Home – Networking and Security – Installation – Service Deployments and click +